Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/7d4835f7-8713-34b0-b001-5d466717879b.roa
File: 7d4835f7-8713-34b0-b001-5d466717879b.roa (raw, json)
Hash identifier: MfdpqKUXXzICc51gZeYMCXsAOx2ndJMvQ1/xC7HyCNk=
Subject key identifier: 16:A4:C1:CA:23:91:EE:F8:E2:73:2A:C1:3A:5D:13:47:28:CC:74:B2
Certificate issuer: /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial: 010D0C9F43285848E9CBE2FB306B6E14897DC400
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/7d4835f7-8713-34b0-b001-5d466717879b.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 54032
IP address blocks: 72.233.156.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:e2:fb:30:6b:6e:14:89:7d:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=e5dafda9-843c-44e8-849b-5b075bc51553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e8:35:69:45:0a:ff:64:30:6a:45:8f:9b:be:
6b:f6:52:c4:b2:7e:f4:ab:6e:ff:e1:dd:a6:61:78:
3a:58:c5:7f:ef:f9:62:f6:1c:51:23:33:3d:6e:6c:
7c:0e:d4:4a:68:11:7b:2b:00:36:c9:db:0e:69:b1:
eb:98:6d:61:41:90:83:db:63:5b:e9:26:53:56:b6:
f4:ce:54:ac:a1:92:67:85:ab:a9:bc:77:02:77:67:
44:00:a5:01:bd:3d:d0:36:01:c4:ab:cf:c1:b1:6d:
cf:a5:2f:9d:6e:d0:70:bd:e4:55:a4:6f:bf:35:4b:
8b:eb:53:e5:c8:f0:7f:26:f1:43:c6:39:65:ab:df:
41:1c:ff:21:c5:57:74:81:99:eb:b9:5e:7a:09:95:
45:9b:9b:48:a5:3c:aa:e6:3e:86:eb:8a:92:64:9d:
be:5d:ce:b6:42:d6:8a:f6:ac:28:38:dc:78:e0:8f:
38:d4:3a:a1:af:d8:76:2c:ed:31:29:55:3b:f9:62:
33:4f:03:ab:df:52:0e:4b:f1:1b:e4:ef:de:04:1b:
29:a1:5e:e3:72:f0:32:92:2c:cf:a9:5f:35:f6:b4:
40:1c:e6:4f:ef:f8:be:62:8a:cc:31:ee:f5:b5:7c:
dd:7c:2d:ae:4d:1a:34:a9:af:dc:19:20:89:13:69:
10:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A4:C1:CA:23:91:EE:F8:E2:73:2A:C1:3A:5D:13:47:28:CC:74:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/7d4835f7-8713-34b0-b001-5d466717879b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
X509v3 Authority Key Identifier:
keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.233.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:15:06:06:19:f7:4e:63:43:b9:dc:e2:d3:3c:c1:bc:e5:a6:
30:86:48:a9:e5:f1:72:d4:ea:d6:9c:b4:74:db:a9:93:86:8d:
f4:fc:65:ba:3c:0e:53:5d:75:2f:95:70:3a:a8:be:12:31:ca:
e3:ce:33:7a:51:57:2e:c9:7a:c0:8c:2c:9c:e0:a1:0b:95:e0:
20:90:55:61:6e:a3:ff:98:5d:4d:b6:14:c2:6e:da:98:b7:db:
5f:d3:06:e7:18:ef:51:df:b8:7d:74:2e:4a:ce:c9:9a:98:33:
02:56:53:bb:00:c1:c3:41:99:31:22:9a:7c:f4:dd:02:70:9e:
a8:66:7c:43:a9:03:12:c5:24:2a:91:dc:56:4d:6a:04:80:44:
88:e1:fc:42:f2:67:a6:74:98:ba:17:a7:72:c5:f6:7e:4e:9d:
da:aa:89:a4:86:55:d9:6f:74:af:45:38:30:0f:50:45:a6:b6:
55:24:b4:4d:af:2f:b6:68:40:fa:5c:4d:bd:74:3b:a1:ad:15:
05:6e:be:ee:82:24:ff:ea:c0:6c:91:a8:2f:15:fe:5a:d3:45:
f0:ad:c4:33:f7:b3:00:41:a2:ed:87:72:4d:d6:75:3a:db:9e:
a3:92:40:3e:18:80:1c:96:52:2f:8e:3e:19:a3:ba:2a:59:b6:
e1:03:b9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:41 2025 by rpki-client on console.sobornost.net